8.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
QEMU is vulnerable to arbitrary code execution. An out-of-bounds read/write access flaw was found in the way QEMU’s VGA emulation with VESA BIOS Extensions (VBE) support performed read/write operations using I/O port methods. A privileged guest user could use this flaw to execute arbitrary code on the host with the privileges of the host’s QEMU process.
rhn.redhat.com/errata/RHSA-2016-0724.html
rhn.redhat.com/errata/RHSA-2016-0725.html
rhn.redhat.com/errata/RHSA-2016-0997.html
rhn.redhat.com/errata/RHSA-2016-0999.html
rhn.redhat.com/errata/RHSA-2016-1000.html
rhn.redhat.com/errata/RHSA-2016-1001.html
rhn.redhat.com/errata/RHSA-2016-1002.html
rhn.redhat.com/errata/RHSA-2016-1019.html
rhn.redhat.com/errata/RHSA-2016-1943.html
support.citrix.com/article/CTX212736
www.debian.org/security/2016/dsa-3573
www.openwall.com/lists/oss-security/2016/05/09/3
www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html
www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
www.securityfocus.com/bid/90316
www.securitytracker.com/id/1035794
www.ubuntu.com/usn/USN-2974-1
xenbits.xen.org/xsa/advisory-179.html
access.redhat.com/errata/RHSA-2016:1224
access.redhat.com/security/updates/classification/#important
h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05164862
lists.gnu.org/archive/html/qemu-devel/2016-05/msg01197.html
rhn.redhat.com/errata/RHSA-2016-0997.html
8.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C